A Company Is Developing an Application That Will Run on Several

question 428

Multiple Choice

A company is developing an application that will run on several Amazon EC2 instances in an Auto Scaling group and can access a database running on Amazon EC2. The application needs to store secrets required to connect to the database. The application must allow for periodic secret rotation, and there should be no changes to the application when a secret changes. What is the SAFEST way to meet these requirements?

• A) Associate an IAM role to the EC2 instance where the application is running with permission to access the database.
• B) Use AWS Systems Manager Parameter Store with the SecureString data type to store secrets. Use AWS Systems Manager Parameter Store with the SecureString data type to store secrets.
• C) Configure the application to store secrets in Amazon S3 object metadata.
• D) Hard code the database secrets in the application code itself.

---

Definitions:

Attributes

Characteristics or properties of an object, element, or file that define its state, behavior, and values.

Tags

Descriptive keywords or labels attached to digital information (like photos, blog posts, or videos) to facilitate searching and organization.

Variables

Elements or symbols in programming and mathematics that can hold varying values within a given set of operations or calculations.

Digital Media

Content or devices that allow for the digital creation, distribution, and consumption of information and entertainment.